GCVE - cpe:2.3:a:baijiacms_project:baijiacms:4.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:baijiacms_project:baijiacms:4.0:*:*:*:*:*:*:*

part: a version: 4.0 update: *

Vendor	Baijiacms Project (`b3982c1d-142f-5542-b487-3450ca42f0bd`)
Product	Baijiacms (`bd7c0d22-b9c1-53f5-9fea-7c44852ed51e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
`pkg:github/baijiacms/baijiacmsv2`	purl2cpe	2026-06-01 10:12:31.107574

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-7568`	vulnerable	2026-06-08 05:14:14.539051	Details available An issue was discovered in baijiacms V4 that can result in time-based blind SQL injection to get data via the cate parameter in an index.php?act=index request. Published: 2019-02-07T07:00:00.000Z Updated: 2024-08-04T20:54:28.434Z Open on db.gcve.eu Reference links https://github.com/baijiacms/baijiacmsV4/issues/2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-16725`	vulnerable	2026-06-08 05:11:05.366149	Details available An issue is discovered in baijiacms V4. XSS exists via the assets/weengine/components/zclip/ZeroClipboard.swf id parameter, aka "Non-standard use of the flash component." Published: 2018-09-08T15:00:00.000Z Updated: 2024-08-05T10:32:53.488Z Open on db.gcve.eu Reference links https://github.com/xxy961216/attack-baijiacmsV4-with-xss	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-16724`	vulnerable	2026-06-08 05:11:05.365742	Details available An issue is discovered in baijiacms V4. Blind SQL Injection exists via the order parameter in an index.php?act=index request. Published: 2018-09-08T15:00:00.000Z Updated: 2024-08-05T10:32:53.571Z Open on db.gcve.eu Reference links https://github.com/xxy961216/attack-baijiacmsV4-with-blind-sql-injection	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.